Privacy Policy

This Privacy Policy describes how ChequeVault ("we", "our", or "us") collects, uses, and protects information about you when you use our mobile application available on iOS and Android (the "App"). By using the App you agree to the practices described in this policy.

1. Information We Collect

We collect the minimum information necessary to provide the App's functionality.

1.1 Account Information

When you create an account we collect:

• Email address - used to identify your account and send important service notices.
• Display name - as provided during sign-up or pulled from your Google profile if you use Google Sign-In.
• Google account ID - only when you authenticate with Google Sign-In, used solely to link your Google identity to your ChequeVault account.

We do not collect your password directly. Authentication is handled securely by Firebase Authentication (Google LLC).

1.2 Cheque Data

The App allows you to record details about issued and received cheques, including payee or payer names, bank name, branch, cheque number, amount, dates, status, and any notes you add.

Cheque data is encrypted in transit with TLS 1.3 and at rest with AES-256 on Google Cloud infrastructure (the same standard used by major banks). Access is gated by per-user security rules so that signed-in users can only read or write their own records. ChequeVault staff do not access individual cheque records as part of normal operations.

1.3 Usage Data

We may collect anonymised, aggregated analytics about how the App is used - such as which screens are visited most or where users encounter errors. This data cannot be linked back to any individual and is used only to improve the App.

1.4 Device Information

We may collect basic device information such as operating system version and device type for crash reporting and compatibility purposes. This information is not linked to your identity.

1.5 Subscription Information

Pro subscriptions are processed entirely by Apple (App Store) or Google (Google Play). We do not receive or store your payment card details. We use RevenueCat to verify subscription status and entitlements. RevenueCat may collect anonymous purchase identifiers as described in their Privacy Policy.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App.
• Authenticate your identity and secure your account.
• Sync your cheque data securely across your devices.
• Send service-related notices (e.g., account changes, security alerts).
• Verify your Pro subscription status.
• Respond to support requests and feedback you send us.
• Detect, investigate, and prevent security incidents or fraudulent activity.

We do not use your data for advertising purposes and we do not sell your data to third parties.

3. Data Storage & Security

Your account and cheque data are stored in Firebase Cloud Firestore and Cloud Storage (Google LLC), hosted in Google's secure data centres.

We apply the following safeguards:

• Encryption at rest - AES-256, applied automatically by Google Cloud to all data stored on disk.
• Encryption in transit - TLS 1.3 between your device and our servers.
• Per-user access rules - Firestore and Storage security rules enforce that signed-in users can only read or write their own records. Every request is checked server-side.
• Authentication - handled by Firebase Authentication, with optional Google Sign-In and two-step verification via your Google account.
• Device-level protection - optional PIN and biometric (fingerprint / Face ID) lock, automatic re-lock after inactivity.
• Screenshot & recording block - the App prevents OS-level screenshots, screen recordings, and obscures itself in the app switcher so sensitive details cannot be captured by other apps.
• Security rule testing - rules are validated with the Firebase Emulator Suite as part of our release process.

No system is perfectly secure. While we apply industry-standard safeguards, you also play a role: protect your account with a strong password, do not share your device unlocked, and enable the App's PIN/biometric lock.

4. Data Retention

We retain your account and cheque data for as long as your account is active. If you delete your account, all associated data - including cheque records and uploaded images - is permanently deleted from our servers within 30 days.

Anonymised, aggregated analytics data that cannot be linked to any individual may be retained indefinitely for product improvement purposes.

5. Third-party Services

The App uses the following third-party services, each of which has its own privacy policy:

• Firebase Authentication (Google LLC) - account authentication. Firebase Privacy
• Firebase Cloud Firestore & Cloud Storage (Google LLC) - data storage and sync, encrypted at rest and in transit. Firebase Privacy
• RevenueCat, Inc. - subscription management and entitlement verification. RevenueCat Privacy
• Apple App Store - payment processing for iOS subscriptions. Apple Privacy
• Google Play - payment processing for Android subscriptions. Google Privacy

We carefully select third-party providers and only work with those that meet our security standards. We do not share identifiable personal data with any third party beyond what is described above.

6. Children's Privacy

The App is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

7. Your Rights

Depending on your location you may have the following rights regarding your personal data:

• Access - request a copy of the personal data we hold about you.
• Correction - request correction of inaccurate or incomplete data.
• Deletion - request deletion of your account and all associated data.
• Portability - request an export of your data in a machine-readable format.
• Objection / Restriction - object to or request restriction of certain processing activities.

To exercise any of these rights, please contact us at privacy@chequevault.app. We will respond within 30 days. You may also delete your account directly from within the App's Settings screen, which will trigger deletion of all your data.

8. International Data Transfers

Your data is stored on Google's infrastructure, which may involve servers in multiple countries. Google provides appropriate safeguards for international transfers under applicable data protection laws. By using the App you consent to this transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the App. Continued use of the App after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@chequevault.app
• Support form: Contact page

We take privacy seriously and will respond to all enquiries promptly.